Photo via The Straits Times

Researchers used Claude to breach OpenAI’s internal systems

Read the original at The Straits Times ↗
Cite

The Straits Times. (2026, September 18). Researchers used Claude to breach OpenAI’s internal systems. The Straits Times. https://www.straitstimes.com/world/united-states/researchers-used-claude-to-breach-openais-internal-systems

Dated when The Aporia collected the article, usually within hours of publication. Check the original for its exact date and byline.

The Straits Times · collected 2026-09-18 · by The Straits Times

Quick Summary

On September 18, researchers from Hacktron used Anthropic’s Claude AI model to identify a security flaw in OpenAI’s public help forum and exploit it within three hours after the release of Claude Opus 5. The breach was reported immediately, and OpenAI fixed the issue within about 14 hours, paying Hacktron $6,500 as part of their bug bounty program. This incident highlights how AI tools are rapidly advancing cyberattack capabilities, making sophisticated attacks easier to execute.
Written by AI on 2026-09-18, from this article's own text only (the story summary below draws on all the coverage).

AI analysis

Story summary

In September, cybersecurity researchers at Hacktron AI used Anthropic’s Claude chatbot to breach OpenAI’s internal systems, gaining access to employee accounts and an internal GitHub repository. The researchers discovered a flaw in OpenAI's public help forum hosted by Discourse, which they exploited within 72 hours. They reported the issue immediately, and OpenAI fixed it within 14 hours while paying Hacktron a $6,500 bounty. The incident highlights how quickly AI can be repurposed for cyberattacks, despite efforts to ensure ethical use through bug-hunting programs like this one.

Written for “AI Breach Risks” on 2026-10-31, grounded in this article and the 7 other(s) covering the same event.

Story

📰 AI Breach Risks
Technology · 8 article(s) covering the same event. Compare every outlet's account →

Compared with similar articles

This article reads unscored and hedges 0% of its claims. Each row says how that neighbour differs.
Dawn
Hedges 0 of 14 claims Outlet record 72/100
CBS News
Hedges 2 of 16 claims Outlet record 66/100
The Guardian
⚖️ Leans right Hedges 2 of 15 claims Outlet record 66/100
September 13, 2026 Different event
Letters from an American
⚖️ Leans left Hedges 10 of 65 claims
“The articles describe different incidents; one is about Dario Amodei's call for slowing AI development, while the other reports on a security breach conducted by researchers using Anthropic's software.”
Persuasion
Hedges 22 of 113 claims
“Article A describes AI agents exploiting vulnerabilities in OpenAI's internal testing environment, while Article B discusses researchers from a security firm breaching OpenAI’s public help forum using software from Anthropic.”
CBS News
Hedges 5 of 18 claims Outlet record 66/100
“Article A discusses a general warning about potential future AI cyberattacks, while Article B describes a specific breach that occurred on September 18 involving researchers from Hacktron using Claude to access OpenAI's internal systems.”
CBS News
Hedges 2 of 17 claims Outlet record 66/100
“The articles describe different incidents: one involves unexpected AI behavior from an unreleased model, while the other reports a security breach of OpenAI's internal systems by researchers using Claude.”
Semafor
⚖️ Centre Hedges 2 of 4 claims Outlet record 60/100
“Article A discusses internal incidents at OpenAI involving model misbehavior and a trust gap, while Article B reports on an external security breach conducted by researchers using Anthropic's Claude to access OpenAI’s systems.”
Semafor
⚖️ Centre Hedges 0 of 4 claims Outlet record 60/100
How this article was measured signals, leaning charts, publisher record, byline, topics and claims

Signals How these are calculated →

Claims extracted
15
sentences that state something as happening or true
Uncertain
0%
0 of 15 hedged ("reportedly", "may", "according to")
Leaning
not political
takes no side on a contested political question
Publisher signals
66/100
The Straits Times's corrections and hedging, across everything collected from it. Not a measure of accuracy.
Outlets on this story
8
Technology
Same framing elsewhere
1
articles that frame the event the way this one does
Analyzed 2026-09-18 · how these are computed

How this is being covered How these are calculated →

Article leaning vs. publisher reliability
Source leaning vs. consistency

Publisher

The Straits Times · 4051 article(s) · 5 correction(s) detected
Running correction rate · 5 correction(s)

Who wrote this

The Straits Times
2549 article(s) here · 0 carrying a prediction
🔮 BOSTON/SINGAPORE/PARIS - Binance, the world’s biggest cryptocurrency exchange, worked on Oct 31 to shore up public confidence after a record US$6.3 billion hack of its platform, promising it would cover all losses from company funds and allow clients to trade again within days.
🔮 The contest between Sullivan and Democratic challenger Mary Peltola is widely seen as one of the few Senate races that could sway control of the chamber on Nov 3.
🔮 But Russian Foreign Minister Sergei Lavrov’s participation in the two-day gathering in Atlanta - at Rubio’s invitation - has roiled many G-20 ministers, aggravating deep rifts over the wars in Ukraine and the Middle East during a meeting that is expected to end without a joint declaration.
🔮 PARIS, Oct 31 - France will deploy a 70,000-strong police presence to contain a widely expected bout of fresh unrest on Saturday in the latest nationwide protests driven by anger over living costs, public services and President Emmanuel Macron's government.
🔮 Gen Z protests reach Germany as over 160,000 expected at Halloween rallies BERLIN, Oct 31 - More than 160,000 people across Germany are expected to join demonstrations on Saturday, organisers say, as a youth-led movement inspired by protests elsewhere in Europe takes to the streets to demand better education and lower living costs. The protests follow a wave of Gen Z-led demonstrations across Europe this year.
🔮 Meta reached a settlement in a landmark case over the alleged harms of social media, the plaintiffs’ lawyers said on Oct 30, leaving Snap as the only defendant in a trial set to open in Los Angeles next week. “We remain committed to improving safety for kids on social media apps and holding tech companies accountable, and we are pleased to have brought this matter to a just resolution on behalf of our client,” Emily Jeffcott, a lawyer representing one of the young women suing both companies, said in a statement.
🔮 Reporters Without Borders chief, Thibaut Bruttin, said: “Novaya Gazeta will remain THE symbol of free, pluralistic, independent, and rigorous journalism – a model for the entire profession around the world.”
🔮 Binance initially said the October incident may have involved a software developer’s compromised laptop, although it later flagged “additional points of breach”.
2026-10-30 · assertive framing · How hackers steal crypto - and what they do with it
🔮 Both Russia and Ukraine have said they are willing to hold further three-sided talks with the US for the first time since early in the year.
🔮 Sikorski, in his comments to reporters, also called for a rapid ceasefire in the Black Sea that would allow safe passage for grain shipments from both Ukraine and Russia.
Also by The Straits Times
Nothing else under this byline is closely related to this article, so these are simply their most recent.
All 2549 articles by The Straits Times →

Topics

Anthropic Claude Discourse Hacktron OpenAI

Subjects

OpenAI ORG · 6× Anthropic ORG · 4× Hacktron ORG · 4× Claude Opus 4.8 to PERSON · 1× Community ORG · 1× Discourse ORG · 1× Drew Pusateri PERSON · 1× Meta ORG · 1× Slack ORG · 1× WASHINGTON GPE · 1×

Narrative

A security research company said on Sept 18 it managed to break into OpenAI’s internal systems using the latest software from Anthropic, exposing how quickly the technology can carry out sophisticated cyberattacks.
framing: assertive · carried by 1 article(s) · first seen 2026-09-18
2026-09-18 · The Straits Times
Researchers used Claude to breach OpenAI’s internal systems · assertive framing

Claims (15 extracted, 0 hedged)

Researchers used Claude to breach OpenAI’s internal systems AI generated asserted
Researchers → use → AI
A security research company said on Sept 18 it managed to break into OpenAI’s internal systems using the latest software from Anthropic, exposing how quickly the technology can carry out sophisticated cyberattacks. asserted
technology → say → cyberattacks
The researchers from security firm Hacktron said they found a security flaw in OpenAI’s public help forum, run by the Discourse platform, that allowed them to take control of the site. asserted
them → say → site
“We immediately reported the initial vulnerability to OpenAI and Discourse and worked with them to coordinate the patch,” Hacktron said in a blog post. asserted
Hacktron → report → post
“We appreciate their attention to detail and fast resolution of this issue,” the post added. asserted
post → appreciate → issue
OpenAI confirmed the flaw was fixed within about 14 hours of being notified and paid the researchers a US$6,500 (S$8,300) reward. asserted
flaw → confirm → reward
“We thank the researchers for contacting us and sharing their findings. asserted
We → thank → findings
We narrowed the permissions on Community sign-in tokens and revoked affected tokens and sessions,” said Drew Pusateri, an OpenAI spokesperson. asserted
Pusateri → narrow → tokens
The Hacktron researchers said they initially used Anthropic’s Claude Opus 4.8 to identify and exploit the software flaw, but struggled to make it work consistently. asserted
it → say → flaw
After Anthropic released Claude Opus 5, the researchers said the newer model produced a working hack within about three hours. asserted
model → release → hours
The hackers did not use Claude Mythos, a more capable Anthropic model that is restricted to a small group of vetted cyber-defence organisations. asserted
that → use → organisations
Anthropic has described Mythos as having the strongest cybersecurity capabilities of any model it has built. asserted
it → describe → model
Hacktron said the underlying software flaw is not unique to OpenAI and is used across many companies’ products, including those made by Slack and Meta. asserted
flaw → say → Slack
The firm said it is continuing similar tests at other companies. asserted
it → say → companies
The case adds to growing concern among security experts that AI tools are making it faster and cheaper to carry out sophisticated cyberattacks that once required specialised teams and months of work. asserted
that → add → work
💬Give feedback
🕘History 🎫Support